Information pursuant to Art. 13 of EU Regulation no. 2016/679

(FOR THE USER)

Dear User, We wish to inform you, in your capacity as the "data subject" regarding the processing of data, that pursuant to Legislative Decree 196/2003 and subsequent amendments, as well as "Regulation (EU) no. 2016/679 of the European Parliament and of the Council of 27 April 2016," the protection of your privacy is provided for.

According to the indicated legislation, such processing will be based on principles of correctness, lawfulness, transparency, and the protection of your confidentiality and rights.

Pursuant to Article 13 of the Regulation, we therefore provide you with the following information:

1) Purpose of data processing

The data you provide will be processed for the following purposes: a) to fulfill specific requests made by you during the contractual and pre-contractual phase.

The types of data processed are as follows:

• Navigation data: The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, type of browser used, operating system, domain name and addresses of websites from which access was made, information on pages visited by users within the site, access time, stay on a single page, internal path analysis, and other parameters relating to the user's operating system and computer environment.

• Additional categories of data: This refers to all personal data provided by you through the site—for example, by registering and/or accessing a reserved area and/or requesting information—namely: name, surname, tax code (codice fiscale), VAT number, e-mail, and other common identification and contact data. Any special categories of data will be processed only if necessary and subject to your prior consent.

Personal data may also be used, subject to your consent, for the purpose of sending informative and advertising material regarding the activities and services illustrated on this website, or otherwise attributable to the activity of the Data Controller and related news or concerning new services.

The legal basis for processing is: the performance of a pre-contractual or contractual obligation, the protection of the vital interests of the data subject or another natural person, the fulfillment of a legal obligation to which the data controller is subject, as well as the consent of the data subject where required.

2) Methods of data processing

Processing will be carried out using the following methods: computerized and paper-based. The processing is carried out by the controller, processor, and/or persons in charge of processing.

3) Provision of data and refusal

The provision of common, special, and judicial personal data for the purposes of carrying out the activities referred to in point 1) above does not constitute an obligation for the data subject. However, any refusal by the data subject to provide personal data in the case referred to in this point 3) entails the impossibility of fulfilling the activities referred to in point 1).

4) Recipients of data and communications

Personal data may come to the knowledge of, and may be communicated for the purposes referred to in point 1) to: employees, external collaborators, other subjects operating in the sector, and all those public and private subjects to whom communication is necessary for the correct fulfillment of the purposes indicated in point 1.

5) Dissemination of data and transfer abroad

Personal data are not subject to dissemination, nor will they be transferred to a third country or international organization. However, any transmission of data outside the EU will be carried out in compliance with the guarantees and protections provided for by privacy legislation.

6) Data retention

Personal data will be stored for a period no longer than necessary to achieve the purposes for which they were collected and subsequently processed. Personal data will be kept for the entire duration of the contract concluded by you and also for a subsequent period according to the following criteria:

1. Within the terms established by current legislation;

2. Within the terms established by legislation, including secondary legislation, that require data retention (e.g., tax returns);

3. Within the period necessary to protect the rights of the data controller in the event of any disputes related to the provision of the service. In any case, the maximum data retention time is estimated at 10 years from the termination of the relationship.

7) Access, rectification, erasure (right to be forgotten), objection, and data portability

It is your right to ask the data controller for access to your personal data and the rectification, erasure, or "forgetting" of the same, or the restriction of processing concerning you, or to object to their processing. It is also your right to request data portability, i.e., to obtain from the data controller the data in a structured, commonly used, and machine-readable format to transmit them to another data controller without hindrance.

8) Withdrawal of consent

If the processing—including that of special data—is based on consent [pursuant to Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a) of the Regulation], it is your right to withdraw consent at any time without affecting the lawfulness of the processing based on the consent given before the withdrawal.

9) Complaint

It is your right to lodge a complaint with the Supervisory Authority.

10) Profiling

We inform you that no automated decision-making process is adopted in the processing of your data.

11) Data Controller

The Data Controller is Dott.ssa CLAUDIA CANTONE, (VAT no. 14696471003) with registered office in (00181) - Rome (RM), via Tuscolana 243, tel. (+39) 347.9552286, e-mail: cantoneclaudia@gmail.com.

12) Data Protection Officer (DPO)

Not designated as it is not necessary.

13) Rights of the data subject

At any time, you may exercise your rights towards the data controller pursuant to articles 15 et seq. of the Regulation, which are intended to be transcribed here.